Document light variant security properties versus default allocators

This commit is contained in:
inference 2024-01-29 20:11:07 +00:00
parent e3ba86d7ca
commit 9eb89b33bf
Signed by: inference
SSH Key Fingerprint: SHA256:FtEVfx1CmTKMy40VwZvF4k+3TC+QhCWy+EmPRg50Nnc

View File

@ -1,7 +1,7 @@
<!DOCTYPE html> <!DOCTYPE html>
<!-- Inferencium - Website - Documentation - hardened_malloc --> <!-- Inferencium - Website - Documentation - hardened_malloc -->
<!-- Version: 3.0.0-alpha.6 --> <!-- Version: 3.0.0-alpha.7 -->
<!-- Copyright 2023 Jake Winters --> <!-- Copyright 2023 Jake Winters -->
<!-- SPDX-License-Identifier: BSD-3-Clause --> <!-- SPDX-License-Identifier: BSD-3-Clause -->
@ -86,7 +86,9 @@
memory region with high entropy random guard regions around it.</p> memory region with high entropy random guard regions around it.</p>
<p>For low-memory systems, <code>VARIANT=light</code> can be used to compile the light <p>For low-memory systems, <code>VARIANT=light</code> can be used to compile the light
variant of hardened_malloc, which sacrifices some security for much less memory variant of hardened_malloc, which sacrifices some security for much less memory
usage.</p> usage. This option still produces a more hardened memory allocator than both the
default musl and glibc allocators, despite the security sacrifices over the full
variant.</p>
<p>For all compile-time options, see the <p>For all compile-time options, see the
<a href="https://github.com/GrapheneOS/hardened_malloc#configuration">configuration section</a> <a href="https://github.com/GrapheneOS/hardened_malloc#configuration">configuration section</a>
of hardened_malloc's extensive official documentation.</p> of hardened_malloc's extensive official documentation.</p>